rest: delete sessions by uuid too